Sweden fines Google for violation of user rights

The Swedish Data Protection Authority (DPA) has imposed a fine of 75 million Swedish kronor (approximately 7 million euro) on Google for failure to comply with the General Data Protection Regulation (GDPR), Swedish Data Protection Authority.

Google, as a search engine operator, has not fulfilled its obligations in respect of the right to request delisting, according to the report.

In 2017, the DPA finalized an audit concerning how Google handles individuals’ right to have search result listings for searches that include their name removed from Google’s search engine in case of, for example, lack of accuracy, relevance, or if considered superfluous. In its decision, the DPA concluded that several search result listings should be removed and subsequently ordered Google to do so.

In 2018, due to indications that Google had not fully complied with the previously issued order, the DPA initiated a follow-up audit. This audit is now finalized, and the DPA is issuing a fine against Google.

“The GDPR increases the level of responsibility for organizations that collect and process personal data, and strengthens the rights of individuals,” said Lena Lindgren Schelin, director general at the Swedish DPA. “An important part of those rights is the possibility for individuals to have their search results delisted. We have found that Google is not fully complying with its obligations concerning this data protection right.”